CVE-2021-29681

CVSS 3.1 LOWEPSS 0.9%

Vexday Risk Score

8Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 3.1EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

21 May 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

IBM InfoSphere Information Server 11.7 could allow an attacker to obtain sensitive information by injecting parameters into an HTML query. This information could be used in further attacks against the system. IBM X-Force ID: 199918.

CVSS:3.0/A:N/UI:N/PR:N/C:L/S:U/AC:H/AV:A/I:N/RC:C/RL:O/E:U

Affected products

IBM · InfoSphere Information Server

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/199917 https://www.ibm.com/support/pages/node/6454591